Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
File:                     2CE7EAA613A389D3132F70754E25E343490494C5.cer (raw, json)
Hash identifier:          OCdWIXHDvOifulfyB7JhrD+RYIMGuLdq52ervJQgNJc=
Subject key identifier:   2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C594967DB88DFEB5D2DFCCDD716EE64089BE3D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jul 2026 03:01:12 +0000
Certificate not after:    Wed 14 Jul 2027 03:06:12 +0000
Subordinate resources:    AS: 270888
                          IP: 177.129.240.0/22
                          IP: 2804:72fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:59:49:67:db:88:df:eb:5d:2d:fc:cd:d7:16:ee:64:08:9b:e3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 03:01:12 2026 GMT
            Not After : Jul 14 03:06:12 2027 GMT
        Subject: CN=2CE7EAA613A389D3132F70754E25E343490494C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:97:c8:64:56:bc:34:20:38:99:96:5e:b0:
                    3a:90:59:9a:d1:22:72:42:cb:01:96:a2:19:03:35:
                    7b:7e:22:cc:87:12:f9:f1:c5:df:82:36:70:bc:13:
                    34:4b:9b:ac:87:c5:a6:e4:ac:47:e8:c3:bf:64:af:
                    8e:6e:0e:b0:18:9a:a2:75:4a:aa:f4:27:0b:7a:11:
                    ff:23:9d:bc:80:6d:c9:09:1a:78:92:1f:be:2e:f8:
                    49:ed:b9:4b:5a:22:ec:ea:bc:44:0a:03:ca:d8:4c:
                    c1:e8:07:20:69:56:f9:b0:ee:57:43:70:bf:3a:7f:
                    d9:57:23:05:25:ad:f2:c9:08:59:6f:f6:2a:93:e9:
                    e4:56:06:43:aa:ee:89:49:b8:88:75:3d:98:d9:d1:
                    dd:7d:24:0b:48:44:07:f1:d3:2b:ee:56:cf:3a:a8:
                    8d:e7:d9:fe:a9:d2:b5:ee:99:4d:c2:ee:20:3a:be:
                    23:32:2a:d3:d0:4a:39:27:1b:b9:44:5d:b1:5e:9b:
                    23:69:8c:af:04:a5:0c:c9:87:cb:c3:40:5f:32:aa:
                    4d:84:ba:73:63:3b:79:80:40:27:d8:db:37:49:e5:
                    a4:c3:00:b0:b5:36:f4:f9:47:c3:da:bf:9f:97:6b:
                    76:b4:b2:78:13:63:07:8b:75:ec:e5:f9:44:4d:48:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.240.0/22
                IPv6:
                  2804:72fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270888

    Signature Algorithm: sha256WithRSAEncryption
         9d:5d:76:97:56:4e:3d:59:f5:90:d5:fb:0a:ef:2c:8f:d0:de:
         fb:1b:86:5d:1c:c9:a7:e4:5b:1e:a9:dd:a4:39:8e:08:08:7e:
         a1:f4:9b:bd:50:65:d4:ae:b3:b4:9f:88:64:c0:1a:d3:62:a8:
         6a:5a:27:ee:a6:47:6b:a1:08:22:0f:6d:2c:cd:7b:fb:29:b4:
         d1:bd:4d:f8:bf:36:74:5a:b6:ef:2e:51:5a:c3:67:d3:38:d1:
         7e:f3:f6:f1:85:fd:03:31:01:58:27:a3:b3:77:2d:d4:08:67:
         06:73:f7:06:4b:d0:49:77:d7:35:74:61:f5:c8:82:5e:3a:5b:
         a5:50:71:6d:59:7c:77:cb:95:d8:ce:14:88:ff:fb:07:80:32:
         75:75:f2:aa:58:d5:26:0b:01:19:9c:79:4c:86:28:47:9b:35:
         b6:a6:33:a5:4f:c2:ea:63:64:7c:9f:ed:44:b4:f3:e0:61:f1:
         d6:2d:eb:d7:42:ba:ef:e4:0c:87:0d:53:d1:6c:55:64:2e:fb:
         98:f9:25:87:ff:5a:66:a3:5c:aa:35:77:88:36:ae:56:a6:09:
         40:cd:48:ad:1a:7e:c8:d6:b3:e4:3d:a3:94:61:53:68:b5:30:
         85:51:f8:a0:13:90:d1:b1:fc:4f:92:6d:9b:5b:87:a7:50:b4:
         fb:0f:f0:af
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPFlJZ9uI3+tdLfzN1xbuZAib49AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA3MTUwMzAxMTJaFw0yNzA3MTQwMzA2MTJaMDMxMTAvBgNV
BAMTKDJDRTdFQUE2MTNBMzg5RDMxMzJGNzA3NTRFMjVFMzQzNDkwNDk0QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJZfIZFa8NCA4mZZesDqQWZrR
InJCywGWohkDNXt+IsyHEvnxxd+CNnC8EzRLm6yHxabkrEfow79kr45uDrAYmqJ1
Sqr0Jwt6Ef8jnbyAbckJGniSH74u+EntuUtaIuzqvEQKA8rYTMHoByBpVvmw7ldD
cL86f9lXIwUlrfLJCFlv9iqT6eRWBkOq7olJuIh1PZjZ0d19JAtIRAfx0yvuVs86
qI3n2f6p0rXumU3C7iA6viMyKtPQSjknG7lEXbFemyNpjK8EpQzJh8vDQF8yqk2E
unNjO3mAQCfY2zdJ5aTDALC1NvT5R8Pav5+Xa3a0sngTYweLdezl+URNSCOpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs5+qmE6OJ0xMv
cHVOJeNDSQSUxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Zm
aEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3ZlQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d2
ZmhBY2lFWHkyY1FqVFVqY1hnTXpvVnBuZjNBZHNjcFlZaHh1aDJyd2ZULzAvMkNF
N0VBQTYxM0EzODlEMzEzMkY3MDc1NEUyNUUzNDM0OTA0OTRDNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsYHwMA0EAgACMAcDBQAoBHL8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiKDANBgkqhkiG9w0BAQsFAAOCAQEAnV12l1ZOPVn1kNX7
Cu8sj9De+xuGXRzJp+RbHqndpDmOCAh+ofSbvVBl1K6ztJ+IZMAa02Koalon7qZH
a6EIIg9tLM17+ym00b1N+L82dFq27y5RWsNn0zjRfvP28YX9AzEBWCejs3ct1Ahn
BnP3BkvQSXfXNXRh9ciCXjpbpVBxbVl8d8uV2M4UiP/7B4AydXXyqljVJgsBGZx5
TIYoR5s1tqYzpU/C6mNkfJ/tRLTz4GHx1i3r10K67+QMhw1T0WxVZC77mPklh/9a
ZqNcqjV3iDauVqYJQM1IrRp+yNaz5D2jlGFTaLUwhVH4oBOQ0bH8T5Jtm1uHp1C0
+w/wrw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:12 2026 by rpki-client